Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_5670267779b14c549e3a4ff8a2dae8f4_cryptolocker

  • Size

    30KB

  • Sample

    240125-bvzw4sdfbq

  • MD5

    5670267779b14c549e3a4ff8a2dae8f4

  • SHA1

    0d62ad6264a70189451b1e2487f177d225cbeb69

  • SHA256

    5b8fd29e41b3cdd5b511e90555decdac03973714e02bbd7e8140287dbb958bae

  • SHA512

    9f41b2b3c65aec3c9f0c55185ecd94dc21a2611df9f9f72a46ffab640167116d0a8bd0469f32725630522e0de711049f72138b891dd248b1e98ffddb111a766a

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM3:bAvJCYOOvbRPDEgXRcuM3

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_5670267779b14c549e3a4ff8a2dae8f4_cryptolocker

    • Size

      30KB

    • MD5

      5670267779b14c549e3a4ff8a2dae8f4

    • SHA1

      0d62ad6264a70189451b1e2487f177d225cbeb69

    • SHA256

      5b8fd29e41b3cdd5b511e90555decdac03973714e02bbd7e8140287dbb958bae

    • SHA512

      9f41b2b3c65aec3c9f0c55185ecd94dc21a2611df9f9f72a46ffab640167116d0a8bd0469f32725630522e0de711049f72138b891dd248b1e98ffddb111a766a

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuM3:bAvJCYOOvbRPDEgXRcuM3

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks